chore(deps): bump pillow in /tools/automatic_battery_tester
What the developer wrote
Authored by dependabot[bot]
chore(deps): bump pillow in /tools/automatic_battery_tester
Bumps [pillow](https://github.com/python-pillow/Pillow) from 12.1.1 to 12.2.0.
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](https://github.com/python-pillow/Pillow/compare/12.1.1...12.2.0)
---
updated-dependencies:
- dependency-name: pillow
dependency-version: 12.2.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
What changed, and why it matters
This is a routine dependency update by Dependabot that upgrades the Python imaging library Pillow from version 12.1.1 to 12.2.0 inside an internal battery-testing tool. The change is a single line in a requirements file. There is no indication in the commit that this fixes a known security issue, and the tool is not part of the Trezor firmware that runs on user devices.
Treat as routine maintenance. If the project tracks dependency updates for compliance, record the bump. No urgent action is required unless a future Pillow advisory specifically affects 12.1.1 and this tool processes untrusted images.
Security signals we found
Dependency version bump in an internal tooling requirements file
No CVE, advisory, or security-relevant description in commit or supplied references
Component is not part of the shipped Trezor firmware or user-facing wallet code
Evidence from the diff
The commit bumps the pinned Pillow version in tools/automatic_battery_tester/requirements.txt from 12.1.1 to 12.2.0. Pillow 12.2.0 is a maintenance release; the commit message does not cite any CVE or security fix. The affected path is a non-shipping, internal test utility (automatic_battery_tester), so the change does not alter the Trezor device firmware, bootloader, or core crypto stack. Without a vendor-supplied advisory or diff showing a security-relevant fix, this is best classified as a routine hygiene update with negligible direct security impact.
Changed components
tools/automatic_battery_tester/requirements.txtPillow Python library (12.1.1 -> 12.2.0)Inspect captured patch +1 / −1
diff --git a/tools/automatic_battery_tester/requirements.txt b/tools/automatic_battery_tester/requirements.txt
index 50b2e1ab..8741ed2d 100644
--- a/tools/automatic_battery_tester/requirements.txt
+++ b/tools/automatic_battery_tester/requirements.txt
@@ -13,7 +13,7 @@ numpy==2.3.1
packaging==25.0
pandas==2.3.0
pfzy==0.3.4
-pillow==12.1.1
+pillow==12.2.0
prompt_toolkit==3.0.51
psutil==7.0.0
pyparsing==3.2.3
Why this scored 12/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.